Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-42501
4.3
MEDIUMCVSS v3
Published
November 27, 2023
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Unnecessary read permissions within the Gamma role would allow authenticated users to read configured CSS templates and annotations. This issue affects Apache Superset: before 2.1.2. Users should upgrade to version or above 2.1.2 and run `superset init` to reconstruct the Gamma role or remove `can_read` permission from the mentioned resources.
apache/superset
GitHubApache Superset is a Data Visualization and Data Exploration Platform
GitHubApache Superset is a Data Visualization and Data Exploration Platform< 2.1.1, < 2.1.2NVD